spec-evaluate

SUSPICIOUS: the core behavior is coherent for an acceptance-test runner and there is no clear credential theft or exfiltration path, but the skill has medium risk because it executes local test/app commands and can delegate through an unverified local script (agent-delegate.sh) with write-capable sandboxing and no provenance details.